Added Redirect URI and AuthCode models for authcode/implicit workflows.
Create /oauth2/authorize route, validate client_id, redirect_uri; handoff.