Redirect user-agent on non-fatal errors, display error on fatal.
Authorization code tests improved
Test redirect_uri values