Access token is missing after redirect