The access_token is not sent to the gateway. It needs to be added. NB: refractoring should be done to put url request build in rest-api.js