Add secret in for OAuth authentication

This goes hand-in-hand with the corresponding [API PR](https://github.com/joindin/joindin-api/pull/81) - the web2 config will need to be updated, and the relevant key granted permission in the database (assuming the API PR is merged).