rename access_token to token for consistency