server side auth access_token_url fix

After applying this fix, exchange_code_for_access_token method in OAuth2API object now returns the access_token.