fix access token parsing