Invalid XHTML at oauth/authorize

Issue Summary

Because the form builder for the page at oauth/authorize is _oauth_common_authorize(), this is also the form ID, and this gets used for the ID for the <form> element in the resulting HTML. However, IDs should not start with '-', so the attached patch renames the function to oauth_common_authorize() so that the page is valid XHTML.

There may well be other pages with similar problems (for example, the form builder for user/%user/applications also starts with a '_').