You're using a URL parameter named "access_token", but per the error message that should instead be named "authorization". (Or, you can use an Authorization header.)
We love to learn from the educators who use Dropbox. Whether you teach kids, teens, adults or a combination of all three, we want to know what apps and integrations you use with Dropbox to help with teaching. Which of the ones below is your favorite, or most used tool?