test without access_token