upgrade to flask-oauthlib 0.5.0
use access token which owned by user instance.