support access / oauth token in the url query string