You asked for and obtained an implict auth token.
There is nothing wrong here. This is correct according to the oAuth specification.
Under implicit auth (Getting OAuth Access Tokens | Twitch Developers) you will obtain a access_token in the #string/URIFragment of the redirect URL, for client side capture and usage
Under code auth (Getting OAuth Access Tokens | Twitch Developers) you will obtain a code in the query string of the redirect URL for server side exchange for an access and refresh token set.