redirect after fetching access token