added access token generation