Added authorization to oauthConfig.xml

Originally I had the client credentials configured to determine valid
authorization. For a demo this is hard-coded. The valid usernames are found in
oauthConfiguration.xml.