change list_gists to accept access_token instead of user