value:  Obtaining a token which grants access to a victim’s primary email, the adversary may be able to extend access to all other services which the target subscribes by triggering forgotten password routines.
name: Use Alternate Authentication Material: Application Access Token