(WIP) FxA oauth support

https://bugzilla.mozilla.org/show_bug.cgi?id=1041814
See https://github.com/mozilla-services/loop-server/pull/183/files#r16489495 `client_secret` is missing in the default config.