Extract token from redirect URL fragment