expose access token from AccountManager