Simplify `AbstractResourceOwner::getResponseContent()` method
Now it will always try to parse json, and only in case of failure, try to parse it as string
Merge pull request #343 from stloyd/feature/simplify_response_content

Simplify `AbstractResourceOwner::getResponseContent()` method
Skip confirmation step for connecting new service feature.
When connecting new service to existing account(ConnectController::connectServiceAction) it shows a confirmation screen, which in most cases is not really meaningfull.
`confirm_connect` boolean confirmation option was added under `connect` node, disabled by default, which turns off the configuration screen.
hwi_oauth:
   #...
   connect:
     #...
     confirm_connect: true|false
Cleanup confirmation page feature
Merge pull request #259 from stloyd/feature/connect_confirm

Allow to disable connect confirmation screen page
Add missing notes to CHANGELOG file
Prepare code for CSRF protection
Refactor code to use CSRF protection
Add CHANGELOG notes
Fix AmazonResourceOwnerTest
Disable CSRF protection by default to prevent potential BC break
To enable it use `options` variable, i.e.:

```
hwi_oauth:
    resource_owners:
        github:
            type:                github
            client_id:           <client_id>
            client_secret:       <client_secret>
            options:
                csrf:            true
Merge pull request #303 from stloyd/feature/csrf

CSRF protection for OAuth2
Some cleanup of code:
- type-hint objects when possible,
- don't use container parameter in constructor
- reduce usage of container
- remove some code duplication
- made configuration a bit more readable