401 Unauthorized

I always get same response for GET /api/rest/session:

{
“success”: 0,
“error”: [
“Unauthorized”
],
“data”: [],
}

even if I set my client secret in X-Oc-Merchant-Id header.
I’ve just set all setting as described in install.txt, and than trying to call methods from Rest Client. What am I doing wrong?