https://github.com/ForgeRock/platform-ui/blob/master/packages/platform-shared/src/api/SessionsApi.js#L59
Both the data and config parameters in the .post() method are optional. { withCredentials: true } is mistakenly being passed as data, causing this request to return a 401.