Read access_token and id_token from params if they exist and are valid
Specs for previous commit
updated test name to comply with test
Merge pull request #50 from legendetm/master

Hybrid client-server authentication