Deprecate :access-token in favor of :token

The :access-token can be used, but will be removed in a future release.