Testing accepting access token in post body