#5 Client redirect URIs

OIDC client redirect URIs are currently not checked during token creation. This definitely needs to be added.

Commit 58ab124311 adds basic redirect URI verification. It needs more thorough testing before I'm willing to call this closable, though.