AuthorizationServer now passes user input when retrieving access tokens and working with API internally