[Security Update] No token values in URL query parameters

Yes it does. You would need to put the access_token in the ‘Authorization’ header for the request. In the curl example, you would have to use the output flag, i.e, --output /path/to/download.file.