Support passing access_token in POST body in addition to query string.