Is the access_token ever missing?  Wouldn't we want an exception if it is missing?