read access token from environment