Sorry for late update and I noticed you've figured out the issue in your application, and we found the same - this errors occur when the identity cookie is missing for your visitor, either the request (AEP Web SDK calls) or the cookie is blocked by other tools.