Access type and approval prompt should be set at URL generation.