little fixes
the very begninning of the authorization code grant class
separation between `grant_type` and `response_type`, like in the RFC 6749 (see for example §4.1.1 and §4.1.3)
fixes in the token interface