getAccessToken now returns full response