Bug fix release
- #650: OAuth1: Fixed space encoding in base string URI used in the signature base string.
- #654: OAuth2: Doc: The value state must not be stored by the AS, only returned in /authorize response.
- #652: OIDC: Fixed /token response which wrongly returned "&state=None"
- #656: OIDC: Fixed "nonce" checks: raise errors when it's mandatory