Did you provide an authorization token in the request? It seems the API is not seeing a valid token (it sees a NULL token).