Hi,
The payload provided appears to be fine. Are you by any chance using a Wordpress plugin named Password Protected? That might interfere with the authentication flow. I will look more into the issue and keep you updated.
Also, could you try it again with the same test user and let me know if it succeeds or not?
Kind Regards,
Nik