Check client and token in GET /oauth/authorize