Handle request token automatically.
Return access token, caller may need to store it for later use.