API switched to passing ACCESS_TOKEN directly