code simplication
skip if missing data.attributes
tighten spec compliance. oauth redirect uri: ensure registered query params are maintained. fix issue with auth code.