OpenAM OAuth2 client using the authorization code grant