fix(oauth): validate that redirect param exists.

Fixes #1786 

@zaach @ckarlof r?
I dig it.