Support statefulness in Authorization Code Grant

Fixes #8 

See http://tools.ietf.org/html/rfc6749#section-4.1.1