add more redirect_uri / token endpoint unit tests