response_type is required and is missing in the OAuth paramters section. For readability purposes it should be added to that list.