added step to initially grant access for app in OAuth login scenarios