empty GET: was expecting preauth response