Changed some properties to protected set, to allow the clients to override their values.
Move the call to AfterGetAccessToken to the end of QueryAccessToken to allow the client to override the TokenType (e.g.)
We have to query the TokenTypeKey!