Add a suite of tests against the authcode workflow
Fix handling/validation of supplied redirect_uri