Just to check, have you got the secret_token (and not the client_secret) set in the right place?
secret_token
client_secret