as opposed to sending them in the response body an...
# general
t
as opposed to sending them in the response body and attaching the access token as an Authorization header