Addressing comments in commits for #2

  - accept endpoints.Context (was *http.Request) in CurrentBearerTokenUser
    and CurrentBearerTokenScope methods;
  - auth context implementation is now split in two parts: public interface
    and cachingContext (default implementation);
  - oauthResponseCache of cachingContext is now mutexed

@dhermes what do you think?