Can you try putting the client id and secret in the config string too? That will make it the same as your statically configured config.
If that doesn't work I'll send an rclone with some more debugging in so we can see what parameters the box backend gets.