It looks like the content-type that you are sending doesn’t like the & formatting of the parameters in the body of the request. Can you try sending the request with content-type: application/json?
We also had a similar discussion on the topic here. Let me know if it helped! In any case, the success response to our requests should either be ‘true’ or ‘false’.