Ah also you app is passing zap request in base64 encoded form, instead it should be url-encoded.