for #180: allow HTTP requests in default hyper client.
for #180: allow HTTP requests in default hyper client.

If an attacker could manipulate URLs for token retrieval etc., they
could wreak considerably more havoc than a downgrade attack.

dermesser/yup-oauth2,dermesser/yup-oauth2