This is still a token, so I believe the `ResponseType` should remain token.  See [`Crypto Tokens`](https://github.com/bshaffer/oauth2-server-php/blob/develop/src/OAuth2/ResponseType/CryptoToken.php), they are a different kind of token but their functionality is the same as an access token