don't send undefined access token