As an authenticated End-user, I want to authorize a server-based application
to access my protected data at a Resource server (service provider). The application must authenticate, before it can be granted access to protected data. Once authorized, the application can continue to access my data until I revoke the authorization to the app or if I am no longer authorized to access the protected resources.