Notify client of OAuth2Errors

* Properly report non-fatal client errors to the client (like e.g.
  invalid_scope) according to http://tools.ietf.org/html/rfc6749#section-4.1.2.1
Fix all lint and PEP8 errors
Attach response data to OAuthException