Do you have logs of your request and response times where this is happening, @drivealiveapp? It definitely should always return a 400 without a Client-ID since all of that is centralized across the API. I can’t reproduce this particular behavior right now.