pull in code from oauth2 branch for a clean merge.
some frameworks, such as angular may append a '/' after the # during the implicit flow, so
check for a leading / and strip it out when looking for the #access_token hash fragment
Merge pull request #19 from att-innovate/oauth2-plugin

pull in code from oauth2 branch for a cleaner merge.