Payload on callback auth

[leomp12]

We should handle a payload data (just bypass) to make easier to use E-Com Plus Store API with serverless apps.

This way, apps will be able to send a trigger ID, as example, then get it back with the new token and continue the task.