add access_token control