pass the request back to the on token callback

Passing the request back to the caller on callback allows the user to have more flexibility over the request flow, e.g., using github-oauth as a middleware

ideally it'd be ```(req, res...)``` but I didn't want to commit any potentially breaking changes since there are 2 dependents.