sending access token to next page javascript