More schema updates (auth.oauth.token.*) for location and param name; added object traversal checker/getter; updated some sample JSON configs