Respond with '400 Bad Request' in case of a missing/invalid client_id or redirect_uri