The problem is connceted with issue:
It was assumed that all WebScreen instances will only call internalApi endpoints and will require authentication. That is not the case. Chat is not an internalAPI and it is not authenticated. That should probably be another issue