Requesting Azure AD Request Tokens on Azure-AD-joined Machines for Browser SSO