Add methods to trade auth code and verify tokens

I used the *responses* package to mock requests, which differs of your current test suite...  I find *requests-mock* not so easy to assert on.

This piece of code was originally written for a proof-of-concept, hence fully open to suggestions/feedback/wipeout :)
good call, nice to have a bit of defensiveness here