API Gateway Security & Centralized Authentication Failure