[Fixed]-It is normal for an OAuth2 implementation to create a new access token every authentication?

Yes, this is the common practice: New Access-Token is created on each authentication request.

It is, however, somewhat uncommon that user would log in 5 times in a row.