Hard Coded URIs

[pixelshaded]

The URIs for handling authorizations and tokens are hard coded in to the middleware. Perhaps make it possible to pass in those routes when creating the provider. I was a little confused on how these events were going to get emitted without looking at the source. The example.js doesn't clarify which routes are intercepted by the middleware either.