added access_token to user