Fix /account/access_token response to actually return the OAuth2 bearer token... doh