Add authorization code flow (still needs to document the process).