Auth: obtain access token from  app credentials

if(err)

You can have no res.body AND no err, and we'd be screwed