The applicationId that you use in the bindings also have to match what is in the token. Currently for Daml Hub tokens, this is hardcoded to "damlhub".
(This may be a duplicate of this issue Cannot exercise contract with Java API to DAML Hub - #2 by Mate_Varga)