Add a hook to prevent centralauthtokens

Allow other extensions to prevent CentralAuth from handing out
centralauthtokens on a request. This prevents an OAuth consumer from
exceeding their authorization.

Change-Id: I929967b707dc8f6f817cf35ff980b3ab42186126