Token not access token

drop the 'access token' terminology in favor of simply 'token'. access token is neither part of the final oauth spec, nor in the grandfathered-in naming of parameters, so it should not be included.