fix parameters for creating AccessToken and RefreshToken in Api and Callback