allow use of access_token for API authorization
properly clear username and password when replacing with access token
properly merge and reject :access_token on auth change
correctly clear basic_auth when changing to access_token
new README and gemspec for 0.0.4 that adds access token handling