Support logging in using a user-specified Access Token (fixes #65)
Do not require users to specify CLIENT_ID and CLIENT_SECRET during development (fixes #66)