by Juan Leyva.
Graham (Treadwell),
can you check out if in Users - Permissions - Define role, the Authenticated user has this capabilities enabled?
moodle/webservice:createmobiletoken
and
moodle/webservice:createtoken
That should solve your problem
Juan