Authorization code grant with PKCE method