The 401 means “Unauthorized”, which could result in one of the following issues:
(1) The one-time-password (OTP) is not correct or not available
(2) Your API key+secret is invalid
It’s likely (1) above. If you generated and send OTP and still has the problem, check if your computer clock is properly synchronized because correct OTP requires synchronized clock.