updating api routes for retrieving access tokens for users