Removing "access_token" query parameter.

OAuth token should only be provided via Authorization header.

Fixes #25