Remove OAuth requirement from server API, and also client UI