access token is also a codomain