401 oauth token is missing

By app access token you mean the ‘client secret’?