Error response is not according to the spec in user denied consent scenario for hybrid flow

[emswbandara]

Moved from wso2-extensions/identity-inbound-auth-oauth#1324
Description:

According to the spec [1],[2] when the user denied the consent in hybrid flow error response must return as a fragment component of redirect URI. But it is returning as a query component.

[1] https://openid.net/specs/openid-connect-core-1_0.html#HybridAuthError
[2] https://tools.ietf.org/html/rfc6749#section-4.2.2.1

Affected Product Version:
IS 5.7.0