Merged in sharing-creds (pull request #175)
https://bitbucket.org/openid/fapi/issues/194/security-considerations-when-two-oauth
https://bitbucket.org/openid/fapi/issues/194/security-considerations-when-two-oauth