Use a whole new approach based on a Katana OAuthAuthorizationServerHandler fork