/oauth2/authorize/http should not send to authorize application page for testing.