/users/me triggers a redirect to /users/[id]

If _wp_json_nonce is passed with the request as prescribed here
https://github.com/WP-API/WP-API/blob/master/docs/authentication.md#cookie-authentication

the nonce is lost during redirection and triggers an authorization error