Is it possible to use the Authorization Code Flow without a redirect?