Update Mongo DBs
More information in InvalidAccountStateException
Rework access token authorization endpoint

An application will never have the account GUID for which the access token was
created, so this endpoint should only require that the authorization code be
specified. Consequently, I moved that into the URL itself; the request body
is now ignored.
Add logging to AuthorizationsController
0.8.0