400: Bad Request

Grant type should be token for implicit or code for authorization grant flow