Expose full token in req.oauth object

Exposes anything that's in the token object handed back by getAccessToken
method, this could be useful to handing around request specific, token dependant
values.