Does any one have examples where you use accessTokens to autenticate API call instead of cookies and sessions.