Don't specify redirect_uri in oauth tests

This was failing because we didn't match the real deployment base url
and we're now testing for that correctly.
Comment on oauth client redirect processing on handling blank redirect_uri's