Serves as intermediary (1st redirect from OAuth2 API) which decides how to
handle the request.
Can redirect onto website to receive consent or can directly activate a grant
and redirect back to OAuth2 API with grant.
Can be used to revive data power tokens.
