Now it gets the access and refresh tokens. It was missing the auth part in the request