Redirect when consent is denied - Part 2

[pi0neerpat]

Depends on #2

This behavior builds and depends on UseKeyp/oauth2-client-redwood#6

Since we are sitting in-between the social provider and the client app, we should not return the user to our home page. Instead they should be sent back to the client's redirect page.

When hitting cancel the user will be returned like:

http://localhost/redirect/node_oidc?error=access_denied&error_description=End-User%20aborted%20interaction&state=89a58ff8-b004-4b84-9dbe-b4a1a9775fd5%253AVbsSOj0H67Xzd4Io2mFGX

Then, take the state property, get the uid, and send the user to /oauth/interaction/:uid/abort to send them back to the client.

Note that original pattern in oauth2-client-redwood should still work, for cases when the login flow was not initiated by a client (eg. no uid in state)