fix: access token size