Following on from #87 which implements advice given in #70:
I believe I have filled in web.config correctly, using the following values, and constructing my callbackurl from my site url + "oauth2/callback"

I've created an App Registration and Published my app to it. I'm now getting Error 400:

Anyone any ideas that I can add to #87 ?