added code to enable access token requests as well