OAuth2 flow

- Client will now accept a token instead of a username/password
- Fixed urls to match new conventions
- Added publicInAccount field where needed - it will be used by Cloudbreak with OAuth2