Improve login by including trackingId and removing secretPayload

secretPayload is no longer required as Spotify Play is open to all, and this patch uses the home page as the page to get the csrftoken and trackingId instead of the secretUrl and secretPayload.

It also adds the `trackingId` and other extra arguments to match `Spotify.Web.Authenticator#authenticateWithUsernameAndPassword()` from the proper client.