Removed client credentials.

We now use a combination of user credentials + device token for device
authentication.