Implements the 'Implicit Grant'.
A typical call looks like
/oauth2/authorize/?client_id=an_existing_client_id=token&redirect_uri=the_client_redirect_uri