Is it neutral?  Even the old draft spec we used for our initial oauth2 support (http://tools.ietf.org/html/draft-ietf-oauth-v2-bearer-08) said basically:

* a Bearer access token SHOULD be in the Authorization header
* a Bearer access token may (SHOULD NOT) be in the query args

The main reason being that an access token is a username/password equivalent for some scope and being part of the URL may get cached on proxies, stored in logs files, etc.

Anyway, not breaking our users' code multiple times within a month is a good idea, I just wanted to bring it to your attention.