* GoAuth2 now sends client secret on Basic Auth, no need to allow it on params any more.

fixes #16