Omniauth redirect should send access-token not `auth_token`

[bettysteger]

My client checks on the URL query param access-token and not auth_token, when confirming email or resetting a password, it is access-token.

So the code in OmniauthCallbacksController, should be:

    def create_auth_params
      @auth_params = @resource.build_auth_headers(@token.token, @token.client)
      @auth_params[:oauth_registration] = true if @oauth_registration
      @auth_params
    end

instead of

    def create_auth_params
      @auth_params = {
        auth_token: @token.token,
        client_id:  @token.client,
        uid:        @resource.uid,
        expiry:     @token.expiry,
        config:     @config
      }
      @auth_params.merge!(oauth_registration: true) if @oauth_registration
      @auth_params
    end