Zapier Oauth Token

OAuth2 token endpoint called by Zapier's backend. Supports the authorization_code and refresh_token grants. Public (authenticated by client credentials in the form body), so it is exempt from the cookie session.