In the current implementation, all applications (clients) register with the same redirect URI (http://localhost:4400/). This results in different applications being treated as the same OAuth client.
Work on implementing proper client differentiation through unique app identifiers.