Merge pull request #6 from dmregister/master

remove location header to prevent redirect

Author: aripringle

src/OAuth2Server/Controller/AuthorizeController.php

@@ -41,6 +41,12 @@ public function authorizeAction()
         }
 
         if (!$server->validateAuthorizeRequest($request, $response)) {
+            $headers = $response->getHeaders();
+            $location = $headers->get('location');
+            if ($location)
+            {
+                $headers->removeHeader($location);
+            }
             return new JsonModel($response->getContent());
         }