fixed issues found during testing, added ability to customize access token