fix(oauth): validate that redirect param exists.

Fixes #1786 

@zaach @ckarlof r?
Should we worry about whether either of these are missing while we are at it?