Things to do - [ ] Generate client-secret to authorize apps - [ ] Verify apps credentials before issuing tokens - [ ] Create special token for the home website