Merge branch 'releases/1.0.0' into develop

1.0.0 readiness
Merge branch 'hotfix/composer-branch-alias' into develop

Per zfcampus/zf-apigility-skeleton#58
Merge branch 'hotfix/31' into develop

Forward port #31
Merge branch 'hotfix/ag-docs-32' into develop

Forward port zfcampus/apigility-documentation#32
Updated OAuth2 for query string / body 'access_token' support:
- Bearer token can be passed in the query string as 'access_token'
- Bearer token can be passed in a POST body as 'access_token'
- Added tests for all 3 oauth cases.
- Form-Encoded *should* work with PUT, but does not (and the
  underlying oauth server restricts to POST as well).
Removed duplicate oauth test.
Fix for CS
Merge pull request #35 from tjlytle/oauth-access-token

Support for OAuth2 Token in Query String / POST Body
[#35] Rewrite logic flow

- Authorization header should always take precedence; check that first, and make
  all later checks check first if an authentication type has already been
  discovered.
- Body content should take precedence over QSA, and should also only be checked
  if the request type could potentially have body content.
- Use ContentType::match() instead of literal hard comparison on media type.
Merge branch 'hotfix/35'

Close #35