Thank you for an anwer. When you get proper token you should use this — it holds your session.
The “invalid grant” you mentioned means you did sth wrong. Look at the access_token and refresh_token you need to authorize both of them.