Support token as well as code flow for public clients