Add an option parameter to the authorize middleware

[LucianoGanga]

The problem is that when someone tries to use a custom authenticate handler in the oauth-server's authorize middleware, there's no way to pass it through koa-oauth-server. This PR adds the possibility of doing that.