You need to set a password otherwise you get that result, I just tested it on my system.
The password needs to be passed like this.... { "on":true , "password":"1234" } but only the first time.
Once a password has been set you don't need to send it every time.