#2 adding internal model for access token