use long-term access token to work around request token issue