OTOH there might be use cases where Pants has to send the access token itself on every request