node server running, access token obtained on server side