fix browser authcode flow, use cf-uaa-lib 1.3.4

Change-Id: Iac434c528a52791ade50eb72c941c3ff57202809