by Mike Verna.
Thank you,The LTI required a token, perhaps I should have posted this in the WebServices category, but I was trying to get a publishers LTI to work.
In the end I figured it out, I had to allow webservice/rest:use for authenticated users.