Update length bytes for access token in payload specification

[PromiseFru]

Update the payload specification so that the length byte for the access token in the content format is 2 bytes instead of 1. This will allow access tokens longer than 255 bytes to be supported.