OAuth consumer: tests fix, comments, Keycloak config notes.