allow applications to overload the behavior of endpoint

https://github.com/OhadR/oAuth2-sample/issues/32