invalid / no redirect URIs during authorization return consistent errors