Update 'lib/oauth2.js'

- Add debug output.
- Correctly handle unauthenticated users.
- Forward errors to application.
- launch test with `DEBUG` set to `oauth2:*`.
Update 'test'

- Fix deprecation warning.
- Add debug trace.
Update 'README.md'