fix 'using access_token' header