Cache oauth tokens locally and with Memcache.

This is an alternative PR to https://github.com/golang/oauth2/pull/42 which avoids protobufs.
It's unlikely that a user will revoke a service account token.

Let's address it if someone complains.