Merged pull requests from https://github.com/pelle/oauth-plugin/pull/132 (OAuth 2 refresh tokens should now work) and https://github.com/pelle/oauth-plugin/pull/137 (allow? will now return false when the token is not found)
Don't try and use client_application if we didn't find it (https://github.com/pelle/oauth-plugin/pull/125)