sessionCreator
Maps a successful OAuth response to the session value stored by the Sessions plugin.
Required when configuring OAuthSessionFlowConfig.sessions.
Return null to reject the callback, which runs OAuthFlowConfigBase.onUnauthorized. Exceptions are not rejections: they propagate to the routing pipeline, so catch them here or use StatusPages.