diff --git a/access_token_service/ats.py b/access_token_service/ats.py
index b646a2b238440cdb9bf414b74d56c441f6bc3a62..a8cf02493e759d7f6ba30bc9ff5be6ec509db92a 100644
--- a/access_token_service/ats.py
+++ b/access_token_service/ats.py
@@ -11,9 +11,9 @@ from tornado.web import RequestHandler, Application, authenticated
 class AccessTokenHandler(HubAuthenticated, RequestHandler):
     ''' Respond to Access Token requests. '''
     async def _request_token(self, username: str) -> str:
-        user_endpoint = f'{self.api_url}/users/{username}'
+        user_endpoint = f'{self.hub_auth.api_url}/users/{username}'
         headers = {
-            'Authorization': f'token {self.api_token}',
+            'Authorization': f'token {self.hub_auth.api_token}',
         }
         with AsyncHTTPClient as client:
             async with client.get(user_endpoint, headers=headers) as resp: