(feat): Support access tokens for external apps