#26 added access_token to login dict in session