when i changed the parameters to clientId it was overwriting the getToke...

...n parameter of clientId, so for admin specific calls clientId was always going to be authenticating with the wrong clientId