don't set accessToken on principal any longer