Add oauth2 flows tests

done for AGIOS-261
@cvasilak mind to review?
since the Stubs act as a router for the different responses, make sense to call it in the ```setup()``` instead?  would be easier to spot I think