https://elanderson.net/2017/07/identity-server-from-implicit-to-hybrid-flow/