client-side OAuth support

[jba]

Tracking issue for client-side OAuth.

See #176 for work in progress.

[findleyr]

What should we do with #19? Close it in favor of this? Repurpose it?

[jba]

For now just reference it, as you have done.

[samthanawalla]

Closing in favor of #19 for organization