mod_http_oauth2: Always show early errors to user Before having validated the client_id, communicating an error back to the client via redirect would make this an open redirect, so we may just as well skip past that logic, and especially the warning log message.

Removes invalid characters from roster entries.

```bash
sudo prosodyctl mod_clean_roster
```