Fix tests for authorization code and confidential client

It shouldn't have client_id in URL params.
Temporary code to get it to work and explain how and why