Authorization tokens are not accepted here: the '/collections/UUID/PATH' form only works for public data, and no anonymous user token is configured.