using access token if supplied