Require access token all the time