Check access_token before making an api call