I've found this to be very non intuitive, I'm running into the same issue as the tokens needed are per user and not global for the application.