Added documentation for save_access_token, temporary credentials must not be reused.

```
The server MUST ... ensure that the temporary
credentials have not expired or been used before.
```
[RFC 5849 section-2.3](http://tools.ietf.org/html/rfc5849#section-2.3 "2.3.  Token Credentials")