This is the second and final step in the authorisation process. It uses the verification code (retrieved in public string GetVerificationCode()).
It exchanges the verification code for an access token.
Once this step has been performed the user will be enabled to perform authenticated requests.