Token from AuthorizationCodeFlow now delivered as a string