Update i use

updates i use for my site. i have more exposed to the events

added `'before_authorize_form', function(req, res, client_id, function doAuthorizeForm(),function doBypass())`
changed `'create_access_token', req, user_id, client_id, function callback(scope)`

changed extra_data to scope to show people where to pass that info at

and various other fixes