further destructure `this` in authorizationCodeGrant; parameterize accept header