added basic access token functionality