add username/password authentication.

first auth: start the app with --auth option and 
provide your username and password

once this is done, the access token gets refreshed
everytime you start the app
update authentication to use the client-side flow
Merge remote-tracking branch 'beanieboi/authentication'