allows save access token without userId and do not retrieve user’s information by the client id in the access token