Add configuration

The config.php file is a sibling to database.php and currently holds the
list of client ids that we allow to authenticate with the password grant
type.