Add another integration test for /authorize endpoint

Checks that a client credentials exception leads to a 401
and an error page from the server (because the redirect cannot
be verified).

See gh-265