Validate response_code

Authentication preserves query-string in original URI