refactored access token security provider