CORE-5557: finished implementing the OAuth authorization code servlet