Remove access token from access code, and create token when code is exchanged for token