README: more consistent delimiter agnostic paths
Fix after boot thread-safety issue
Update token expiration and invalid errors
Add access_token to oauth middleware

In latest oauth2 spec versions oauth_token was replaced with
access_token
Update CHANGELOG