loads from either environment or config, priority given to access tokens