adds pkce support to authorization_code flow

[remcojansen]

This adds a command-line argument --pkce to the authorization_code command. When provided it will create a code_verifier and code_challenge and add these to the respective calls to the authorization server.

Providing --pkce without providing --client-secret is considered valid.