adds specs for authorization_code
adds integration specs for all authorization flows
refactors the generate token interaction