400 - Invalid authorization code

Thanks guys. You made me review the docs again and it was just that I was passing response_type=access_token instead of response_type=code..