Allow apply hybridAuth cookie with access_token