* ConditionalUserAccess (): don't access the token directly use the access function.