** Bumped protocol version into 1.0.0draft2
** Added expired token check into Bearer strategy
** Removed unused oauth2orize dependency
** Added /oauth2/token for token refreshing