Changes to OAuth callback handler

the response's body type changed from no type to object for status 200

the response's body type changed from no type to object for status 201

added the optional property refresh_token to the response with the 200 status

added the optional property refresh_token to the response with the 201 status

added the required property access_token to the response with the 200 status

added the required property access_token to the response with the 201 status

added the required property expires_in to the response with the 200 status

added the required property expires_in to the response with the 201 status

added the required property token_type to the response with the 200 status

added the required property token_type to the response with the 201 status

added the required property user to the response with the 200 status

added the required property user to the response with the 201 status

the response's body type changed from object to no type for status 200

the response's body type changed from object to no type for status 201

removed the required property access_token from the response with the 200 status

removed the required property access_token from the response with the 201 status

removed the required property expires_in from the response with the 200 status

removed the required property expires_in from the response with the 201 status

removed the required property refresh_token from the response with the 200 status

removed the required property refresh_token from the response with the 201 status

removed the required property token_type from the response with the 200 status

removed the required property token_type from the response with the 201 status

removed the required property user from the response with the 200 status

removed the required property user from the response with the 201 status

added the non-success response with the status 303

added the non-success response with the status 400

added the non-success response with the status 403