rename RootToken to AccessToken