adds alternative get-access-token-from-params function for providers not using JSON as defined in spec, updates README