Ignore .access_token
/getVisitMap now requires login