clean port to http-client

comment out building and exporting `Web.Authenticate.OAuth.IO` as it is deprecated and might get removed.