What's the best way to save the access token in MongoDB?

Sounds sensible to me

What you did sounds good to me.
There is no changes I would make.