Create Write Access Security Profile

[Nat Sakimura]

Write access probably needs the following:

1. Only the right party can use the token (code, access token, refresh token).
2. Man-in-the-middle can be detected.
3. Screen re-write attack can be detected.
4. Request tampering can be detected.
5. Response tampering can be detected.