After logging in with a local strategy, the `access_code` query param persists on the url. The AuthToken and the RefreshToken is properly set in the browser local storage 