Fix for #53

set request.client from token upon validating bearer token.
Get request.client the right way. Add access_token on request. #53