Don't pass the Authorization header if no access_token present