allow access token to be submitted