Added request object to callback arguments to OAuth model can access request context
Set proper cache control headers as per spec. see http://tools.ietf.org/html/rfc6749#section-5.1