Fixes #5: Access Token should not be displayed as if its sent on query string