Upgrade to oauthlib 0.6.2 (bug 917040)

The need for serious OAuth2 support prompted me to revisit this. I implemented our non-standard 2-legged case independently.

This is an updated version of https://github.com/mozilla/zamboni/pull/1751

@diox r?