Initial implementation of oath login.

Post to login now generates an oath access token which will be used to
identify the user in subsequent requests.