Providing access tokens via query string parameters is no longer supported.