Just returns a text string now.

Also needs to handle case where user clicks "Cancel" on the authorization page, where the redirected URL will be like this:

http://localhost:45773/?error=access_denied&error_description=user+cancelled+authorization&state=ehl2JNIbAl_M5jQyUMUU7Q