Fix some teething problems with OAuth2Sso

1) Validation of ResourceServerProperties should not fail if tokenInfoUri
is missing when it is not going to be used anyway

2) The OAuth2SsoConfigurer needs to declare a checked exception so
it can be used painlessly (since the HttpSecurity object that it gets
passed throws them for practically everything)