remove hard coded access token