What back end are you using? Depending on that, you may need to use the token and check the low security box. Edit: I just read your reply. I use LMS for you definitely need to set up the api key and check the low security box and you should be good. Also depends on how your set is, are you behind a reverse proxy? If so, what is the web server and your config?
👍🏼
It’s nice that they have a demo server. I use jt for testing sometimes.