Refactor access token check

This cleans up the checking done for the current access token stored in `session[:access_token]`. Also adds some documentation for each method.