/api/usertoken/GetToken 404 - Don't use a redirect URL
If you get a 404 on the /api/usertoken/GetToken request and you're doing AAD authentication with Bot Framework, then most likely the problem comes from the fact that you're using a redirect URL in the OAuth connection. Just remove it and things should be fine.