fix(callback-endpoint): correctly pass jwt token to success redirect, not access token#34