page redirects back after authorization ok, but page state does not change apart from indicating token in URL