Add client secret requirement to AuthApi.
Use client secret from config to log in.
Add default secret into config.php.dist.
Remove legacy Vagrant system from web2 as we now have joindin-vm.
Merge branch 'akrabat-remove-legacy-vagrant'
Merge branch 'richsage-oauth-add-secret'