Access token

* server issues and requires accessToken for use in a session
* server properly authenticates with Access Platform to get mobile's deviceId