Allow putting token in the body of a PUT request

Brent, I'm not super sharp on the OAuth2 specifications, but it would seem right to me that one could submit a token in the body of a PUT request, very similar to how a POST request works.

Right now the library throws an `invalid_request` error when trying to do this, which makes it difficult to use in a RESTful API.

Here is a patch to fix it.