cleans up redirect URI validation
** BC-BREAKING CHANGE ** - addresses #80: requires exact matching of URL by default, rather than only matching the beginning string
** BC-BREAKING CHANGE ** - addresses #80: hardens default security by making 'enforce_state' param in AuthorizationServer true by default
standardizes tests - uses arrays instead of setting query directly in Controller tests
** BC-BREAKING CHANGE ** - addresses #139 - makes OAuth2_Storage_UserCredentialsInterface::getUserDetails required to return user_id
attempts to standardize documentation a little better
Return from verifyResourceRequest() if we don't have token data

This ensures any error response already set in getAccessTokenData gets
returned, not overwritten by the 'insufficient_scope' error.
Merge pull request #140 from rjmackay/fix-resource-request-error

Ensures resource request errors not overwritten by the insufficient_scope erro
Merge branch 'develop' of https://github.com/bshaffer/oauth2-server-php into develop
adds interface methods to CompatibilityInterface
Fix 401 response from ResourceController

* Add missing s on %s to make sure we return realm value.
* Add error and error_description to WWW-Authenticate header
per http://tools.ietf.org/html/rfc6750#section-3
* Remove wrong error_uri parameter return because of extra params passed
  to setError()
Merge pull request #142 from rjmackay/develop

Fix 401 response from ResourceController
fixes #144 - correct mimeType parsing in header
adds scopeutil constructor doc block
fixes formatting from #142, fixes same issue in a different spot
refactors controller tests
addresses #145 - fixes status code for insufficient_scope requests
addresses #143 - adds WWW-Authenticate to 400 responses, removes error codes from invalid requests
removes unnecessary isset
updates README to point to oauth2-demo-php for rename