set `accessToken` as well