API access token is generated. If stolen or lost you can refresh it