ZegnatI get a code. I then have to HEAD the source to retrieve the token_endpoint URL (I could get behind allowing a HEAD request sync). Then I have to POST the code to the token_endpoint URL and get back an unknown payload (should be JSON containing auth info).
