Auth: obtain access token from  app credentials

Which avoids the need for be.ok