Finishing the initial authorization-code

We'll probably split this into at least 2 chapters