more fixes for client
client: add return when api rate limit is reached while downloading
validate access token with tests