access_code should only be passed when required