* set the access token with the newly swaped token. It is misleading to keep storing an invalidated token.
* return the new access token for convenience