Empty access token payload when using PKCE