Access token

- server issues and requires accessToken for use in a session
- server properly authenticates with Access Platform to get mobile's deviceId