s/auth_token/access_token

Correctly name the query parameter for authentication!