diff --git a/src/routes/oauth2.js b/src/routes/oauth2.js
index be32da0e0..a5d0fded8 100644
--- a/src/routes/oauth2.js
+++ b/src/routes/oauth2.js
@@ -435,7 +435,7 @@ function passwordReset(req, res, next) {
             if (error && error.reason === UsersError.BAD_FIELD) return next(new HttpError(406, error.message));
             if (error) return next(new HttpError(500, error));
 
-            res.redirect(util.format('%s?accessToken=%s&expiresAt=%s', config.adminOrigin(), result.token, result.expiresAt));
+            res.redirect(config.adminOrigin());
         });
     });
 }