make the access token a configurable parameter for the API client

This allows us to only have to set it once and not pass it in for every request