counting issued access tokens for a per user per app basis
added ternary for brevity and clarity
Logic regig in controller to handle new flow