Make Application model truly "swappable"

See issue #90

This also introduces a new non-namespaced setting OAUTH2_PROVIDER_APPLICATION_MODEL.