front-end access to the access_token

added method that will return the access_token for front-end use in javascript
Would it be better to just make this a public method?