I am working on my first Box API calls. I am using Postman at the moment and was finally able to get the API to access a token to work and I have retrieved a token. I then take that token and send as authorization to the API to list the items in a folder. The Box application that was created for this purpose is a CCG application and I am passing the client ID and secret and the box subject type is enterprise.. When I call the API to get the folder items, it tells me “session expired” even though I had just retrieved the access token. What am I doing wrong?