Send value of "Allow Access" along with authorize form POST

The server-side component uses this value to distinguish a confirmed form post
to /oauth/authorize from any other kind of post that might have happened.