…lexus/chestnut#47 (as well as stay up-to-date).
…eplaces non-URL-safe chars in base64 CSRF key
…s the OAuth2 token and (if authorized) returns a credential map. This allows middleware consumers to use the token as an identity, which isn't exactly in the spirit of OAuth2 but is how everyone uses it. See #10 for discussion.
…other library functions
…not using JSON as defined in spec, updates README
…1); massive refactoring to reduce code, organize and make more into more idiomatic Clojure