Added the initial version of OAuth 2.0.

The server should now adhere to the Authorization Code Grant (4.1) part of the OAuth 2.0 specification (RFC-6749). This will only work with third-party (client) systems that are manually entered into the database. Registration will be the next task.