rails 3 and ruby 1.9.2 updates
changed the spec so that it was comparing json objects, and not strings
We use an extra key for authentication.  Token endpoint will try to map all required keys to params that were passed in to the hash
mapping the first authentication_key to username.  So now it's not tied only to email which would fail for non-email conditions.
Allowing use with rails 3.1
typo
Even more liberal on dependencies
ActiveSupport::SecureRandom --> SecureRandom to remove deprec warnings
Engine controllers descend from common base class
Consolidate :authenticate_user! before_filter
No isolate_namespace
TokensController can be subclassed
TokensController can be subclassed
Merge remote-tracking branch 'original/master'

* original/master: (94 commits)
  bump version
  disable failing router tests
  fix tests
  fix rspec
  extract attr_accessors. fixes #39
  found myself needed to be able to refresh access_tokens ( more whitelisting )
  tidy up
  bump version
  include Authorization too
  add tests
  fixes #35 ( whitelisting user and client )
  bump version
  fix extracting client id/secret from basic auth header
  merge
  validate client id/secret from params or basic auth headers
  remove unused scope
  made tokens expire correctly
  fix nil redirect_uri
  bump version
  fix empty redirect_uri on authorization form
  ...

Conflicts:
	config/routes.rb
	devise_oauth2_providable.gemspec
	lib/devise_oauth2_providable.rb
	lib/token_endpoint.rb
	spec/rails_app/Gemfile
	spec/rails_app/app/models/user.rb
	spec/rails_app/db/schema.rb
	spec/rails_app/spec/integration/token_endpoint_spec.rb
Merge remote-tracking branch 'ordncn/engine_common_controller'

* ordncn/engine_common_controller:
  Consolidate :authenticate_user! before_filter
  Engine controllers descend from common base class
Don't load deleted rake tasks
Don't be anal about development gem dependencies
Pass along the "state" param as asked for in the IETF draft: http://tools.ietf.org/html/draft-ietf-oauth-v2-27#section-10.12 (see http://homakov.blogspot.it/2012/07/saferweb-most-common-oauth2.html for more details)
Merge remote-tracking branch 'ordncn/flexible_client_credentials_strategy'

* ordncn/flexible_client_credentials_strategy:
  TokensController can be subclassed
Merge remote-tracking branch 'ordncn/no_isolate_namespace'

* ordncn/no_isolate_namespace:
  TokensController can be subclassed
  No isolate_namespace