fixed to allow pass access_token and token secret as parameter directly