oauth validation: improve redirect checking
oauth validation: improve redirect checking

Add these improvements:
- check that the redirect URI is not empty
- check valid group name of the redirect ref
- report the right path in the validation error

nak3/origin,jsafrane/origin,jeremyeder/origin,jim-minter/origin,pecameron/origin,jeremyeder/origin,enj/origin,hroyrh/origin,soltysh/origin,soltysh/origin,deads2k/origin,ingvagabund/origin,ingvagabund/origin,dinhxuanvu/origin,akram/origin,mahak/origin,spadgett/origin,pweil-/origin,sallyom/origin,bparees/origin,enj/origin,bparees/origin,tnozicka/origin,akram/origin,mahak/origin,openshift/origin,coreydaley/origin,gabemontero/origin,sjug/origin,hroyrh/origin,Miciah/origin,coreydaley/origin,csrwng/origin,pecameron/origin,sjug/origin,JacobTanenbaum/origin,dinhxuanvu/origin,openshift/origin,dinhxuanvu/origin,csrwng/origin,csrwng/origin,mkumatag/origin,sallyom/origin,spadgett/origin,nak3/origin,pweil-/origin,enj/origin,nak3/origin,tnozicka/origin,mahak/origin,anpingli/origin,jeremyeder/origin,mfojtik/origin,sjug/origin,dinhxuanvu/origin,tnozicka/origin,Miciah/origin,tnozicka/origin,hroyrh/origin,gabemontero/origin,jeremyeder/origin,bparees/origin,deads2k/origin,jsafrane/origin,anpingli/origin,akram/origin,sallyom/origin,sdminonne/origin,openshift/origin,xiuwang/origin,dinhxuanvu/origin,deads2k/origin,gabemontero/origin,pweil-/origin,jeremyeder/origin,xiuwang/origin,spadgett/origin,ironcladlou/origin,pecameron/origin,ingvagabund/origin,sdminonne/origin,ironcladlou/origin,ironcladlou/origin,mfojtik/origin,coreydaley/origin,anpingli/origin,JacobTanenbaum/origin,xiuwang/origin,mfojtik/origin,tnozicka/origin,jsafrane/origin,mkumatag/origin,sdminonne/origin,soltysh/origin,Miciah/origin,spadgett/origin,jim-minter/origin,tnozicka/origin,spadgett/origin,mkumatag/origin,JacobTanenbaum/origin,jim-minter/origin