how to use sas token to access storage accounts