added access_token to User.