Extensions and configurations required to enable authorization code grant without client secret with WSO2 Identity Server