About step 2,
what I get back is:
http://localhost:4200/?code=[CODE]&scope=user_read
is this correct?