remove access token from URL after done with it...

to prevent re-logging in by hitting browser back button