refactor core.oauth

compatibility with new freedom v0.6 core.oauth API

2 oauth providers introduced based on chrome.identity and chrome.webRequest.
oauth.identity passes the integration test, but no testing setup for oauth.webrequest yet 
(chrome.webrequest only available on Chrome extensions and current selenium test is a packaged app)

want tilde, here and on webrtc-adapater..
before 1.0, the ^ does exact match afaik