Extend authorization code flow with PKCE