remove extra api request methods

oops.. that was just ideation, should not have been committed to git
auth request customizations are now passed as input

it doesn’t make sense to have to do more building work after you get the
auth result response, it can do it all for you if you give the data
up front.  this is a first pass at making that change.

todo:

* support a `location` field on the input data, to signify where we will search for the access token

* scopes can be defined on a token request, we need to look for those and pass to the scope factory

* update docs

* refactor for cleanliness - we may not need as many classes as I have originally created