Allow authorization code in GET parameter too