Is broker used only on success? E.g. can the broker return error, say "user did not approve your app" or "user cancelled the authz UI"?