Using javascript client id for authorization