User 'code' provided in params to build access token