allow user to specify access token