This is a VB.NET example - but I use this get get an access token for a user all the time, and have never received the response you are showing - so maybe this will help?
Public Class FacebookAuthorization
Private Shared Property BaseURL As String = "https://graph.facebook.com/oauth/authorize"
Public Shared Function GetAuthUrl(ByVal appID As String, ByVal redirectUrl As String, ByVal permissions As String) As String
Return String.Format("{0}?client_id={1}&redirect_uri={2}&type=user_agent&scope={3}", BaseURL, appID, redirectUrl, permissions)
End Function
End Class
EDIT:
The access_token you get back from this request can be used like so:
https://graph.facebook.com/me/feed?access_token=XXXXXX - get's you their wall/timeline
https://graph.facebook.com/me/home?access_token=XXXXXX - get's you their news feed