Always include access token in URL query