handling access_token in query as default