title: Valid BigCommerce auth token triggers 'Authorization Error' getting webhooks?
body: <p>I've gone through the two step oAuth process to get a long lived access token. I can validate that the access token is valid by successfully making several API calls with cURL...</p>
  
  <pre><code>curl -XGET 
    -H 'X-Auth-Client: xxxxxxxxxxxxxxxxxxx'
    -H 'X-Auth-Token: xxxxxxxxxxxxxxxxxxx'   
  https://api.bigcommerce.com/stores/xxxxx/v2/products
  </code></pre>
  
  <p>...returns the store products as expected. Provisioning webhooks returns results as expected. However <a href="https://developer.bigcommerce.com/api/stores/v2/webhooks#list-hooks" rel="nofollow">requesting the list of webhooks</a>:</p>
  
  <pre><code>curl -XGET 
    -H 'X-Auth-Client: xxxxxxxxxxxxxxxxxxx'
    -H 'X-Auth-Token: xxxxxxxxxxxxxxxxxxx'   
  https://api.bigcommerce.com/stores/xxxxx/v2/hooks
  </code></pre>
  
  <p>Yields <code>{"error":"Authorization Error."}</code></p>
  
  <p>The token is for the store owner. The store owner has all visible permissions enabled in the admin interface, and as stated above has the ability to provision new webhooks.</p>
  
  <p>Is there a separate permissions somewhere to enable listing webhooks? Is the BigCommerce API just buggy? </p>