BACKLOG-1327 implement client credentials in API