Supporting implicit workflow during authorization

This adds implicit workflow support during authorization.
We should rename this `self.token`