get the access token correctly from authSettings