More integration test refactoring

- Split OIC tests into separate module.
- Add token request function.
Extra authorization request validation

For openid scope requests

- Response type 'token' is invalid
- A nonce is required for implicit and hybrid flows