Hey again @LizaD,
Thank you for your perseverance in this. 
I had that before and eventually moved to what I posted on the post before the error. Basically, if you use what you mentioned, you'll get:
`{"statusCode":400,"error":"Bad Request","message":"Request must contain a kbn-xsrf header."}%``
That's what I'm using -H "kbn-xsrf: script" even though putting anything in front of kbn-xsrf: will get rid of that error. Saw that being recommended here: Request must contain a kbn-xsrf header