Check for empty code in calback

Prevent a redirect loop by checking for an empty `code` GET parameter
in the callback request.
Merge branch 'master' of https://github.com/mattbostock/negroni-oauth2 into mattbostock-master

Conflicts:
	oauth2.go
Merge branch 'mattbostock-master'