Add checkAccess for subject and token