Refactor AuthorizeController

[dkarlovi]

Couple of things:

• separate business and view logic (to enable DRY overriding) the way FOSUser does it (done in Allow overriding authorizeAction's render #564)
• break it apart, currently there's 11 constructor dependencies (for example, once Inject whole access token inside of auth token instead of just the string #555, getClient() becomes obsolete)