The POST login request need to have a 'X-Request-Id' in its headers otherwise we get a 403 ClientError.