removing user client types, adding owner to config, changing how tokens are requested, adding optional authentication to GET /config route