mod_http_oauth2: Only add nonce when issuing a client_secret Not as important that the client_id be unique if there's no client_secret since the point was to make each issued client_secret distinct.

--% conflicts: mod_bookmarks
module:log("info", "mod_bookmarks has been deprecated, now loading mod_bookmarks2")
module:depends("bookmarks2")