OAuth 2.0 Implicit Grant (Client-centric)