oauth2server: authorization flow fixes

Fixes issues with the oauth2server authorization flow as well as adds test for restful APIS.

Supersedes PR #2003 
1: D100 Docstring missing
24: D103 Docstring missing
28: D103 Docstring missing