Login Flow V2 : poll return code

up and running NC 18.0.3 as docker container on RPi4…
Trying to use “Login Flow V2” with a client application and seems to be ok.

Observation: polling the app password : in case of authentication is not done the return code is ‘302 Found’ and not 404 as in this doc link:

Question: can the app password provided by the V2 poll request be deleted / destroyed by the "… -X DELETE -H ‘OCS-APIREQUEST: true’ … " command ?

Thanks, Norbert