access_token: return json for consumers asking for that

At least Twitter for iPhone now uses json.