Improve comments and error messages around access tokens.