Implement returning an access token to the user and deleting nonces