Remove the -k switch to curl for the call to Auth0