Change access_token call to POST