pass the access_token in OIDC_access_token header to the application