Use statuscode 303 instead of 302 for redirects

[JuliusPC]

Use statuscode 303 instead of 302 for redirects

Description

OAuth 2.0 itself does not require a specific HTTP statuscode for redirects. Due to issues with potential leaking of credentials, the current draft of OAuth 2.1 recommends the use of 303. Moving from 302 to 303 should not break anything.

[robotdan]

Thanks for the issue @JuliusPC we'll take a look.