Separated access token from user verification routes