[3.0] [OAuth] .well-known must be mounted under /

The discovery info URL (/.well-known/...) must be mounted under the root of the domain.

You must make sure that:

• /.well-known is mounted under root, without the oauth/ part
• It still delivers all other URLs with the oauth/ part
• The issuer is delivered as https://example.com/ without the oauth/ part