implements cookieStore
client now gets the access token