Support POST on the authorization endpoint
Use a memory stream in ApplyAuthorizationResponseAsync to set the ContentLength header.