anyReadAuth() requires either client or user credentials
Fix errors in OAuth authorization path