title: "Token does not have the privilege for this request" when trying to create a photoscene
body: <p>I am trying to create a photoscene. But I am getting an authentication error.  I can't tell from the examples what I am doing wrong. </p>
  
  <p>I ran this curl command:</p>
  
  <pre><code>curl -v 'https://developer.api.autodesk.com/photo-to-3d/v1/photoscene' -X 'POST' -H 'Content-Type: application/json' -H 'Authorization: Bearer eyJhbGciOiJIUzI1NiIsImtpZCI6Imp3dF9zeW1tZXRyaWNfa2V5In0.eyJ1c2VyaWQiOiJZUlZNSlNFNTdFVzMiLCJleHAiOjE1MzMwNjMxNzYsInNjb3BlIjpbImRhdGE6cmVhZCJdLCJjbGllbnRfaWQiOiJIQXFEdEtPN1ZidVJnSDBuTDBNRkowQjAyRWxCRUszbCIsImdyYW50X2lkIjoiZTdhdzM5bnNvU3ZIZVZrQ2w4SzhKUWt1WDVqaWJWU0siLCJhdWQiOiJodHRwczovL2F1dG9kZXNrLmNvbS9hdWQvand0ZXhwNjAiLCJqdGkiOiJBNlYyYUppRGpiWlU5bWVqeTJqdEpXUnh3OE9Td1JZTmpxbVBmNHlYZUhseERWVDRIVVVhOVpEMXp2VldWWHFhIn0.O-uBTW5ydubECaSecFa6lfIfU0oPAslCMcJ0r6ww4Zo' -d 'scenename=test_20180731110556' -d 'format=rcm,rcs,obj,report'  -d 'scenetype=object' -d 'gpstype=precise'  2&gt; /tmp/test_20180731110556
  </code></pre>
  
  <p>I get this error message in STDOUT:</p>
  
  <blockquote>
    <p>Token does not have the privilege for this request.</p>
  </blockquote>
  
  <p>And this in STDERR:</p>
  
  <blockquote>
    <ul>
    <li>Hostname was NOT found in DNS cache   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed   0     0    0     0    0     0      0      0 --:--:-- --:--:--
    --:--:--     0*   Trying 52.40.81.206...</li>
    <li>Connected to developer.api.autodesk.com (52.40.81.206) port 443 (#0)</li>
    <li>successfully set certificate verify locations:</li>
    <li>CAfile: none   CApath: /etc/ssl/certs</li>
    <li>SSLv3, TLS handshake, Client hello (1): } [data not shown]</li>
    <li>SSLv3, TLS handshake, Server hello (2): { [data not shown]</li>
    <li>SSLv3, TLS handshake, CERT (11): { [data not shown]</li>
    <li>SSLv3, TLS handshake, Server key exchange (12): { [data not shown]</li>
    <li>SSLv3, TLS handshake, Server finished (14): { [data not shown]</li>
    <li>SSLv3, TLS handshake, Client key exchange (16): } [data not shown]</li>
    <li>SSLv3, TLS change cipher, Client hello (1): } [data not shown]</li>
    <li>SSLv3, TLS handshake, Finished (20): } [data not shown]</li>
    <li>SSLv3, TLS change cipher, Client hello (1): { [data not shown]</li>
    <li>SSLv3, TLS handshake, Finished (20): { [data not shown]</li>
    <li>SSL connection using ECDHE-RSA-AES128-GCM-SHA256</li>
    <li>Server certificate:</li>
    <li>subject: businessCategory=Private Organization; 1.3.6.1.4.1.311.60.2.1.3=US; 1.3.6.1.4.1.311.60.2.1.2=Delaware; serialNumber=2401504; C=US; ST=California; L=San Rafael; O=Autodesk,
    Inc.; OU=IPG - Core Services; CN=developer.api.autodesk.com</li>
    <li>start date: 2018-03-09 00:00:00 GMT</li>
    <li>expire date: 2019-04-20 12:00:00 GMT</li>
    <li>subjectAltName: developer.api.autodesk.com matched</li>
    <li>issuer: C=US; O=DigiCert Inc; OU=www.digicert.com; CN=DigiCert SHA2 Extended Validation Server CA</li>
    <li><p>SSL certificate verify ok.</p></li>
    <li><p>POST /photo-to-3d/v1/photoscene HTTP/1.1  User-Agent: curl/7.35.0 </p></li>
    <li>Host: developer.api.autodesk.com  Accept: <em>/</em>  Content-Type:</li>
    <li>application/json  Authorization: Bearer</li>
    <li>eyJhbGciOiJIUzI1NiIsImtpZCI6Imp3dF9zeW1tZXRyaWNfa2V5In0.eyJ1c2VyaWQiOiJZUlZNSlNFNTdFVzMiLCJleHAiOjE1MzMwNjMxNzYsInNjb3BlIjpbImRhdGE6cmVhZCJdLCJjbGllbnRfaWQiOiJIQXFEdEtPN1ZidVJnSDBuTDBNRkowQjAyRWxCRUszbCIsImdyYW50X2lkIjoiZTdhdzM5bnNvU3ZIZVZrQ2w4SzhKUWt1WDVqaWJWU0siLCJhdWQiOiJodHRwczovL2F1dG9kZXNrLmNvbS9hdWQvand0ZXhwNjAiLCJqdGkiOiJBNlYyYUppRGpiWlU5bWVqeTJqdEpXUnh3OE9Td1JZTmpxbVBmNHlYZUhseERWVDRIVVVhOVpEMXp2VldWWHFhIn0.O-uBTW5ydubECaSecFa6lfIfU0oPAslCMcJ0r6ww4Zo</li>
    <li>Content-Length: 88   } [data not shown]</li>
    <li>upload completely sent off: 88 out of 88 bytes  </li>
    <li>HTTP/1.1 403 Forbidden &lt; Access-Control-Allow-Credentials: true  </li>
    <li>Access-Control-Allow-Headers:</li>
    <li>Session-Id,Content-Length,Accept-Encoding,x-ads-acm-check-groups,Content-Encoding,x-ads-acm-namespace,Content-Type,If-Modified-Since,Range,Accept,x-ads-acm-groups,Content-Range,x-requested-with,Expect,Access-Control-Allow-Credentials,If-None-Match,Access-Control-Allow-Origin,x-csrf-token,x-ads-test,Authorization,If-Match</li>
    <li>Access-Control-Allow-Methods: POST,GET,OPTIONS,HEAD,PUT,DELETE,PATCH </li>
    <li>Access-Control-Allow-Origin:  &lt; Content-Type: text/plain &lt; Date: Tue,</li>
    <li>31 Jul 2018 18:05:56 GMT &lt; Content-Length: 51 &lt; Connection: keep-alive</li>
    <li>{ [data not shown] 100   139  100    51  100    88     80    138</li>
    <li>--:--:-- --:--:-- --:--:--   138</li>
    <li>Connection #0 to host developer.api.autodesk.com left intact</li>
    </ul>
  </blockquote>
  
  <p>My original request to create an access token was:</p>
  
  <pre><code>https://developer.api.autodesk.com/authentication/v1/authorize?response_type=token&amp;client_id=HAqDtKO7VbuRgH0nL0MFJ0B02ElBEK3l&amp;redirect_uri=http%3A%2F%2prod.sonautics.com/oauth/callback.php&amp;scope=data:read%20data:write%20data:create%20"\n\n
  </code></pre>