pub fn challenge_of(verifier: &str) -> String
PKCE S256: base64url(SHA-256(verifier)).
base64url(SHA-256(verifier))