Pluggable OAuth2RequestValidator

The OAuth2RequestValidator, which is used in the Authorization and Token endpoints, should be pluggable so that developers can use a custom implementation if needed.

JIRA ticket: https://jira.springsource.org/browse/SECOAUTH-420