force_post_binding and client_signature_required should have to be turned off.
force_post_binding
client_signature_required