move tests from oauth-srv to flows
bug - client's login.html