get access token from authenticated user