get app access token and object