Removed access token position BODY, support only HEADER and QUERY for the time being