fix(oauth): validate that redirect param exists.

Fixes #1786 

@zaach @ckarlof r?
Should the user try again? This handles a case that the user likely can't do anything about.