passing access_token via params '/api/account/:access_token'