don't break when there's no access token in URL