Retrieving user profile -- Access_token used but not id_token?