Fix URL for token exchange call in exchangeForToken()