fix parameter handling for AccessToken, RefreshToken and Token