access token can be passed via config