Use client.id in favor of client.key and remove the key entirely, which makes a whole bunch of things easier on the back end. Updated unit tests and API calls to reflect this change.
Prevent creating multiple access tokens for the same client/user grant; OAuth web flow unit tests