oauth2: add possibility for denying consent requests

[aeneasr]

Idea: &consent=deny

[Cikey]

Just a heads up: The sdk currently uses &consent=denied in line 115:

return fmt.Sprintf("%s&consent=denied", claims.RedirectURL), nil

[aeneasr]

48c229b