working without access_token