OAuth2 - retrieving a token with implicit grant