why is my tool response coming back unauthorized? ...