sebselI can get it to pass point 2 "The client sends the access token in the HTTP Authorization header" and point 27 "Queries the Micropub endpoint with q=config", in the implementation report, but that's all. Adding photos does seem to add passing points.
