get access token from GET param