After being redirected from AUTH0_DOMAIN/authorize to callback I get token but only in CALLBACK_URL#access_token=TOKEN form