Add partial implementation of POST /oauth/token