Refresher on the implicit grant flow