correct warning text in code response validation
correctly error out on flows where no id_token was provided ("token")
remove unused variable params from javascript
make implicit post javascript HTML 4.01 Strict compliant