Make access_token readonly