Add OAuth2RequestAuthenticator strategy for authenticating client HTTP requests

The default just adds an Authorization: BEARER ... header. Can be injected into
an OAuth2RestTemplate (in Java or XML config) via a setter, so no need for
additional namespace support.

Completes cientside part of gh-136