Supporting implicit workflow during authorization

This adds implicit workflow support during authorization.
I don't think this is needed (not in the spec)