build_access_token is protected, not private. Move access token retrieval into its own method