protect registration with client basic auth
Fix Mongo implementation of Oauth store
Use defaults for mongoDB
use mongoDB for token as default
clean up
Let Spring Security handle invalid tokens
move token generation out of user service
add read me
Merge remote-tracking branch 'upstream/master'

Conflicts:
	README.md