Added overridable methods for returing authz and token endpoints.

Previously the base `ServiceProvider` class didn't provide a default `authorization_endpoint()` and `token_endpoint()` implementation, and so always required the use of a sub-class (and ignoring the values passed to the `OAuth2` constructor.