Make an integration test for disabling oauth_body_hash

The PR making this an toggle feature has been merged. However, the tests were pretty minimal. Let's add an integration test for body_hash_enabled when it's both true and false to test Consumer all the way through.

I'll assign this to myself and get to it in the next month or so.