It states here that going forward, we must prefer the auth code flow method since "With the plans for third party cookies to be removed from browsers, the implicit gran