v3.6.0

Now also returns a claims object with id_token results.

v2.0.0

Breaking Change: redirect.match() and popup.authorize() will now reject with an OAuth2Error instead of a simple string.