Remove capabilities idea (it's unnecessary).

As suggested by Robert Escriva, the idea of capabilities
is unnecessary - they can be expressed with macaroons alone.

Also make client code work even after redirection.