OAuth token requests must use POST

per the spec: http://tools.ietf.org/html/rfc6749#section-3.2
Merge pull request #79 from stormpath/oauth-fix-post

OAuth token requests must use POST