fix access_claims in callback