Move the call to AfterGetAccessToken to the end of QueryAccessToken to allow the client to override the TokenType (e.g.)