Remove custom-filter entry for pattern="/oauth/token".  Custom filter is...

... only necessary if authenticating clients via request parameters, which OpenESPI does NOT support