Used by the dashboard after MojoAuth redirects back with ?code=…&state=…. Not intended for direct client use.
Exchanged token.