Add the access token to the response object
Clean up access token insertion.