Simple access token endpoint for plug apps