Swap OAuth2 authentication for Token authentication.
Create Login form.
Remove CLIENT_ID and CLIENT_SECRET constants from client.
Fix client login flow.