fixes #163 - only saves submitted redirect_uris to the authorization code, so no redirect_uri is properly handled in token controller.  AuthorizeController->validateRequest now returns a boolean instead of params array.  Parameters can be accessed using the new class getter functions