giving up on obfuscating access_token
giving up on obfuscating access_token