Use correct value for tokenAction param, otherwise the whole login workflow occurs in the same window