OSNG-8 reviewed OAuth2-Client

reviewed OAuth2-Client and changed the behavior a little bit that when
no auth_code was sent that no post execution will be done, this is agreed with Jochen.