{"errors":"[API] Invalid API key or access token (unrecognized login or wrong password)"

Just a point - you need to include the API KEY & Password as a part of URL & need not to send as headers.