Add authenticateFirst which redirects to login

if user is not authenticated
Add redirection in case of error [RFC6479, 4.1.2]
POST /authorize + Authorization code