"Insufficient authorization" means you entered a wrong account number or API key. The "forbidden" problem I don't know - maybe Oanda temporarily blocks access when a wrong API key was entered too often.