Added Scenario: An Identity Provider tries to send a response over HTTP-Redirect, violating the spec