1. Yes, let's check in both places.
2. Please change symbols to strings to avoid memory leaks: `server.authorization_response_types.map(&:to_s).include? response_type.try(:to_s)`