Agree with you that its odd that the methods work the way they do, but its there to match the style of other grant types. ideally each grant type would just provide some detail on how `get_access_token` should handle `User`s, `AccessToken` params and whether or not a `RefreshToken` should get created. Maybe that's a future refactor