make oauthTokenLength and shaLength final
move all hash algorithm related definitions to same place. Since code should not know which algorithm it is using
credential matcher settings should be part of object initializations