Determine if an authorization code should be returned when using the hybrid flow
Use appender.Append to add the id_token in the response to avoid accidental replacement