access_token instead of token for Facebook OAuth2