Add client secret requirement to AuthApi.
Use client secret from config to log in.
Add default secret into config.php.dist.
Merge branch 'richsage-oauth-add-secret'