fixed access token retrieval