Switched back to UUID token instead of JWT because implicit grant URI limitation