consent page should now be able to generate access tokens according to the implicit grant flow, but the final redirect containing the access token data has not been implemented yet