Merge branch 'hotfix/ag-docs-32'

Close zfcampus/apigility-documentation#32
Updated OAuth2 for query string / body 'access_token' support:
- Bearer token can be passed in the query string as 'access_token'
- Bearer token can be passed in a POST body as 'access_token'
- Added tests for all 3 oauth cases.
- Form-Encoded *should* work with PUT, but does not (and the
  underlying oauth server restricts to POST as well).
Removed duplicate oauth test.
Fix for CS
Merge pull request #35 from tjlytle/oauth-access-token

Support for OAuth2 Token in Query String / POST Body
[#35] Rewrite logic flow

- Authorization header should always take precedence; check that first, and make
  all later checks check first if an authentication type has already been
  discovered.
- Body content should take precedence over QSA, and should also only be checked
  if the request type could potentially have body content.
- Use ContentType::match() instead of literal hard comparison on media type.
Merge branch 'hotfix/35' into develop

Forward port #35