Prepare access_token storage for crypto

* only store a fraction of the access_token in the db since it is a crypto key the client provides
* also fix configuration users not being in the db file