Note that the portal demonstrates its authorization for obtaining the signed document by including the access token (403e...e7b3) in the Authorization header.
Also note that the URL of the document requested is created by adding /content to the URL specified in the response received when the signature process for the document was created (the document[0].url property of the JSON object contained in the response)