ditching the type parameter in oauth2 requests

breaks some implementations  <ahem> dropbox ಠ_ಠ