Add support for the prompt parameter ('consent' and 'none').

Introduce a setNotAuthorizedResponse() method.
passes in redirect_uri to remove duplicate code