Working app-only authorization

It allows only https transport, no other options available.