Client refactor

 * Removes `Implicit` and `UserCredentials` grant type flows from client for simplicity
     * _these may be added back for a second screencast_
 * adds `resource` HTML page where user can enter a token and submit a form to access the resource
 * adds configuration in `data/parameters.json`