Hey RandomWalk, I think your problem might be the uri-escaping of your token. Which you perform but from what i can see you do not send over. Instead your query seems to have the last slash of the token escaped (i.e. token ends in \\) but not the plus sign. Try sending the uri-escaped token over through your query.

Check your tokens here - this sends your uri-escaped token:

Although it says invalid (maybe action is wrong), it returns a created-date which leads me to think uri-escape (or simply replace the dreaded plus sign with %2B is the correct way.

ps. They had to use a plus sign didn't they?