added setter for access_token so that we can use 2-legged auth; commented out x-li-format header for now as this prevents XML posting