authorized? gotta judge @access_token.validated?
fix get_token_from_hash problem.