Add the access token to the response object