mod_http_oauth2: Validate redirect URI depending on application type Per https://openid.net/specs/openid-connect-registration-1_0.html require that web applications use https:// and native applications must use either http://localhost or a custom (non-https) URI. Previous requirement that hostname matches that of client_uri is kept for web applications.

This module blocks configured queries that change server state.

E.g. to make vCard storage read-only:

``` lua
readonly_stores = {
	vcard = { "vcard-temp", "vCard" };
}
```