finished the login process, returning an access token