Make token endpoint stateless by default
Honor tokenEndpointUrl for authentication entry point