did minor cleanup as far as how access tokens are handled in the api responses