The useOAuth parameter is set to "always" which is causing this. It should be set to a REST endpoint that provides information about the current user.