i call the api with a proper auth code and it returned only redirect path. but i thought it would return me a token or something how is the structure above this system can you guys teach me