Put the accessToken under /users like simple login does.