CORE-5546: added checks for missing query parameters to the oauth authorization callback endpoint
CORE-5546: exterminating some bugs
CORE-5546: only require Agave authorization if necessary