Use the Authorization request header field to send the token.

Per http://tools.ietf.org/html/draft-ietf-oauth-v2-bearer-14#section-2.1
this is the recommended approach which must be supported by all servers.
Merge pull request #1 from jpd236/master

Use the Authorization request header field to send tokens instead of the URI query string.