Implement `code' request and response for OAuth 2.0