"/authorize" URL renamed to be more consistent with the actual path
Extra newline removed
Display error messages
Handle also FatalClient exceptions.

Do not define oauth2_data as static view attribute, values are stored between the requests.
Initialize oauth2_data in dispatch() so POST method could access it too
Require login when accessing /authorize endpoint