The problem is the link:
It should only contain the root domain plus the query string. As the reply is only available for the private group, it will return 404 if someone logged out tries to hit it.
I can’t replicate the issue on my end. Let’s talk on Skype about this.