fixed bug with double access token param