Support API versions in other places

In #373 I added API versioning, but missed two places (dialog URLs and get_app_access_token). This fixes that, and also switches OAuth#url_for_dialog to use https.