SSO OAuth support

Add sso, accesstoken scopes
Add oauth_client_id field to Authorization
Implement oauth_controller
Override how bearer tokens are extracted for access_code
Return errors other than client_id or redirect_uri
Update tests
Test temporary timeout
Console oauth controller
Add console oauth controller test
Allow filtering authorizations by scope when deleting all
Use rails http basic auth parsing, reuse controller, correctify comments
Add test for scope param in Authorizations#destroy_all