OAuth2!

Following design doc here: https://github.com/mozilla/fxa-oauth-server/wiki/oauth-design

TODO:
- [x] mysql driver
- [x] authenticate the `assertion`
- [x] return `scopes` with access_token

/cc @zaach @warner