Cleaned up OAuth strategy and added updateClient logic

 * Added update client REST endpoint
 * Moved dao into internal/ folder
 * Created model.js
 * Using PrincipalsDAO rather than API to retrieve user
 * Test: change config rather than import csv to test tenant admin capabilities
 * Couple of code cleanup fixes