Removed base64 decoding of token when present in authorization header. Fixes #23
Updated ResourceServerTest
Fixed client_id and client_secret retrieval from request in conformity with the RFC
Added test_scopeParamRequired()
Added test_issueAccessToken_HTTP_auth(). Fixes #22
Updated Password grant
Style fixes
Updated ClientCredentials to properly include scopes
Updated unit tests
Storage corrected

Wrong client storage replaced with session storage
Merge pull request #26 from ziege/patch-1

Storage corrected
Fixed unit tests following 74d9946db37591c83b0a59b8359ebc35259908fb
Merge of upstream corrections into develop branch