So you are doing the manual process and not the user-agent Bubble auth.
Remove & at the beggining of your body. This is not needed and probably create issue.
Which error do you get when you try to intialize the token call?

Also, did you set none/selfhandled for the auth part?