ok it has something to do with ssl. I changed to http only and it worked.