Provided more specific and strict rules for access token creation.
There is a lack of clear procedure