OAuth access token

Finally managed with postman. Could have been less painful … no idea why curl did not work