Rename /fxa-oauth/code to /fxa-oauth/token

It makes more sense since a token is what is returned and this matches the [pull request](https://github.com/mozilla-services/loop-server/pull/112/files).