I have an app that has a single activity that has a sign in fragment followed by the actual fragments of the app. What is the best practice to pass user tokens (access token