Making AccessType, ApprovalPrompt and RedirectURL optional

I have no idea, many providers send a response with the token type in lower case but I do not know if they allow it in the Authorization header.