Pass access token on redirect, fix IRI constraint

The IRI constraint fix is temporary. It will be removed as soon as the
final RouterConstraints are implemented.