mod_http_oauth2: Stricten check of urlencoded form data Because type(formdecode("string without equals sign")) == "string", so best avoid continuing in that case, even if strings mostly behave as tables as long as you don't hit one of the __index methods.

module:hook("authentication-success", function (event)
	local session = event.session;
	local sasl_handler = session.sasl_handler;
	session.log("info", "Authenticated with %s", sasl_handler and sasl_handler.selected or "legacy auth");
end);