allow OIDCRedirectURI's with an empty path

and fix crash, thanks to @CedricCabessa