Fixed bug with persistence of client scope. This caused a new access token to be created on login after signup
Changed the principal persisted with the access token to be user.getID() instead of user.getEmailAddress()
This allows the modification of email address without the need to issue a new access token

If you pull this code you will need to drop the oauth and user collections from MongoDB