Fix explicit redirect uri not being optional in authorization code grant

Fix explicit redirect uri not being optional in authorization code grant #169