Returning message with redirect_uri

I have successfully implemented an OAuth2 server in my application, I am trying to return the failure message to the user, such as 'Incorrect username/password', my local strategy looks like this now:

```
passport.use(new LocalStrategy(function(username, password, callback){
User.login(username, password, function (err, user, response) {
if (err) {
callback(err);
} else {
if (user) {
callback(null, user);
} else {
callback(response.message); // this is the failure message 'Incorrect username/password'
}
}
});
}));
```

With this implementation, I can show the message to users in the very simple, clean and clear webpage.

Can I pass the message to the client's redirect_uri, something like:
`http://OAuth2Client.com/auth/OAuth2Provider/callback?message=Incorrect%20username%2Fpassword`

Start with the local strategy callback and the authorization redirect_uri/callback flow described in the issue. Review the repository's existing redirect handling to determine whether a failure message can be passed safely and consistently; done should mean the supported behavior is defined and covered by an appropriate test or documented limitation.

Written by the indexing model from the issue text.