ResourceProvider#authorize returns access token