Updated error message and excluded /user-login from access_token required routes