when i changed the parameters to clientId it was overwriting the getToken parameter of clientId, so for admin specific calls clientId was always going to be authenticating with the wrong clientId