I am implementing a custom auth flow in a Flask application for testing. When I respond to the PASSWORD_VERIFIER auth challenge, a token is being returned.