Bail on bad clients or users, instead of barreling ahead.

Thanks Amado Sanchez for finding this! (Bug report via email.)
Add grant-types and token-types to Link header.

See http://tools.ietf.org/html/draft-wmills-oauth-lrdd-07#section-3.2.
Add Travis.