Use fragment and form POST OAuth responses

OAuth clients can now request response_mode=fragment or response_mode=form_post during authorization. The form_post mode sends the authorization result to the client's redirect URI in a browser POST, while fragment places it in the URL fragment.

These modes help clients that require a response format other than the default query redirect. See the OAuth and OpenID Connect guide for the authorization flow.