adding decoder param for parsing request and access token responses

fixes: #74