Code syncing via /api/user/code returns 401 unconditionally