Allow public clients to use the code flow

fixes mitreid-connect/OpenID-Connect-Java-Spring-Server#611