You should receive a mutation result or nothing (depends on your contract), but you got <!DOCTYPE html> instead. It's definitely wrong, you got an html page redirecting you to login page, instead of a json answer.
<!DOCTYPE html>