remove set_app_token, but add set_access_token instead