client controller updates, add GET route for auth token exchange