More tweaking and progress.. working api token exchange.  Bad formed requests though.