Disable "soft" matching of redirect URIs

[aktiur]

Currently, the client validation verifies that the redirect URI provided as part of step 1 of the OAuth process is, once stripped of its query parameters, equal to one of the registered URIs for this client.

The OAuth2 spec says that matching the redirect URI should be done on the full URI, so that soft matching should be deactivated.