add ACCESS_TOKEN endpoints