Enables client-side only OAuth