Port the OAuth Bearer middleware from Katana.

#39 
This is an as-is port of the Katana Bearer token middleware. It will be used by the JWT components when they become available.