partial implementation of implicit grantt GET /authorize route