mod_http_oauth2: Validate redirect URI depending on application type Per https://openid.net/specs/openid-connect-registration-1_0.html require that web applications use https:// and native applications must use either http://localhost or a custom (non-https) URI. Previous requirement that hostname matches that of client_uri is kept for web applications.

--% conflicts: mod_bookmarks
module:log("info", "mod_bookmarks has been deprecated, now loading mod_bookmarks2")
module:depends("bookmarks2")