Add tests for clients with multiple registered URI's
Added authorize 'state' parameter test
Added Redirect URI query component retainment
Added a check against fragment components in authcode workflow.