This line worries me, as there could be other parts (user/pass, port, fragment) that are not taken into account.  Maybe an approach more like [AuthorizeController::buildUri](https://github.com/bshaffer/oauth2-server-php/blob/develop/src/OAuth2/Controller/AuthorizeController.php#L277), or an approach that *only* alters the query string