Make getApplicationAccessToken public

For posting apprequests, we need to use the application access token
not the user one. It is easy to specify this in the parameters to the api
call except that the method to retrieve it is protected. I can see no
obvious reason why.