It's personal use here. The user is responsible to get his access token. It would be third party access when I handle authentication on my server, and generate access tokens for distribution to multiple users.