Call the done() callback in sendResponse()

It plays better with `koa`. Related to https://github.com/thomseddon/koa-oauth-server/pull/5