update for my issue: the guys at ST updated the core version running for my managed instance and now everything is fine. 😺 btw @User , I am getting back two cookies -

sAccessToken

and

sIdRefreshToken

while in the docs it says I should get back

sIdRefreshToken

,

sAccessToken

and

sRefreshToken

.