Remove authorization for access_token method in authorize controller. Change routes.