TokenResponse type with RFC annotations