mod_http_oauth2: Allow configuring PKCE challenge methods You'd pretty much only want this to disable the 'plain' method, since it doesn't seem to add that much security?

This module adds a command to `prosodyctl` for listing users.

``` sh
prosodyctl mod_listusers
```