send the real access token, not null. more logging