Serves as intermediary (1st redirect from OAuth2 API) which decides how to
handle the request. Can redirect onto website to receive consent or can
directly activate a grant and redirect back to OAuth2 API with grant. Can be
used to revive data power tokens.
