* handle xhr.reponse status !== 200
* throw correct error if url has error has error parameter on request authorization code
* rewrite oath tests because of heavy refactoring