Code flow support for token endpoint