improve access_token spec