removed possibility to get an access token via request parameter.

removed possibility to get an access token via request parameter,
because basic access authentication is recommended
Merge remote-tracking branch 'origin/master'