add methods and route to test getting access token