more properly respond to some client registration errors
disallow fragments in redirect uris for dynamic clients, closes #622
fixed error code string
set proper content type on user info JWT response