Redirect URI preservation test
Tidying up comments (#120).
Missing default or invalid redirect_uri tests.
Harden client check. Fix #114.
Refactor auth code client_id fallback auth