Turned out to be a problem when using a 3rd party auth middleware https://github.com/daptin/daptin/issues/133#issuecomment-1222035598