Your token is generally a key of your data object (and not the "data" itself), in the "Post Response" field, the following script should work :

let data =res.body ;
bru.setEnvVar("token",data.access_token);