Modified how the callback URL for authorization is built.

The URL is now created via a static method in the callback handler's class, AuthorizeDomainRequest. It takes a HttpServletRequest parameter for portability reasons. It can use the incoming request to determine the domain.

Note: This is only tested in that it will generate a valid string. In order to do a more comprehensive test, a shim to test with is required.

Closes #5
Added a custom object mapper to a broken bin.

When reading ExternalAuthorizationInformation from the database, the deserializer was being bothered by a filter that it did not know about. A custom ObjectMapper has been supplied that will ignore these unknown filters.

Closes #6
Added a missing pre-auth state in the OAuth v1 flow.

OAuth v1 first creates a state token that must be retained and used later to exchange the unauthorized token for an authorized one. This state was being retrieved, but it wasn't being retained. This has been fixed.

References #8
Allowed GET for the authorization callback.

When an external entity was calling back to our system, we were requiring POST. We now also allow GET.

Closes #7
Hand-decode the state parameter.

The state parameter that was part of the OAuth v1 callback was not being correctly deserialized. To bypass this, we do the serialization ourselves.

Closes #7