oauth: type must be 'code'
Use a more realistic clientId
End sentences with a dot.
Some improvements to the oath/exchange endpoint