Corrected oAuth login configuration (Scope)
Corrected API Authorization header (includes 'Bearer')