Check for correct options.

[yageek]

The responseType is token and not id_token. Trying to fix #288

[hzalaz]

@yageek thanks for the PR but the check for nonce is only for id_token. We are fixing it by only validating that for OAuth redirect via /authorize

[yageek]

Ok. But why does the transaction manager not attach a nonce if I did not specify one in the options before calling loginWithCredentials?

[hzalaz]

because there is a bug we need to fix to avoid generating nonce for that endpoint