validate response type and grant type
provider tests now bump to access token
fix handle oauth2 access token when the method is GET
authorization flow success without some validation
can persist bearer token now