We have developed an app to pull event details to a website that is about to launch; these work in sandbox and we have promoted the app to prod. However, now we receive - invalid user credentials for the app on the production environment. We have changed the calling URL and the authorization token.