use both of access_token & mytoken in request