Implement access token authorization endpoint
User #getAsTry when deserializing BSON

If the deserialization fails, the error message is much more helpful.