Check out this video and observe how the headers are set up for the authorization. I have a feeling you might be configuring it wrong.