Corrected authorization URL and Content-Type header.