Finally got the auth to get a valid access token by reconstructing the redirect URL to be case sensitive