aws api gateway: missing authentication token