put OAuth token setter and OAuth token state setter into locking mechanisms.
tweaks
address comments
Merge pull request #195 from box/lock

put OAuth token setter and OAuth token state setter into locking mechani...