replace base64 access tokens with uuids