Make validateAuthorizeRequest not specific to a single HTTP method.

Allow client_id, redirect_uri, response_type, and state to come from either GET or POST params.
Port modified `get` method from HttpFoundation Request and add tests.