Initial support for authorization code response