I just checked, and it’s because you have httpsauth security enabled which is not allowing the REST API request, you need to disable or exclude all REST URL like:
by the way I am testing on your staging site and that’s what I am getting this issue once I get it go through then I would be able to see the issue. anyways.