looking in the web app, under the “App Credentials” section, it lists those credentials as “used” when I attempted the curl command.