try to add access_token to headers