don't set session without providerUri

oauth3.core.js

@@ -1083,6 +1083,9 @@
             me._providerUri = opts.providerUri;
           }
           if (opts.session) {
+            if (!me._providerUri) {
+              throw new Error("'providerUri' was not supplied");
+            }
             me.session(opts.session, opts.sessionId);
           }
         }