Token flow / clientAccessToken support