fixes #468: support v4 + access tokens