Add extra service to directly retrieve a temporary access token

To avoid doing a full oauth token exchange for each login, add a server that directly can return an access token when passed the right username and password. The token is crypto-safe and only valid for 1 day.
Added basic webclient mockup that can retrieve the notes
Fix a unit test and remove javascript oauth library