Impersonation API: response_type: 'token' not working