Fix failing redirection specs

OAuth2 redirections specs were failing due to order of params.

It could be tested by parsing url and comparing params values, host and protocol, which would prevent similar problems in the future, but now as the order is alphabetical, I don't think it will cause more problems.