Authentication

[PLACEHOLDER — needs real content from someone with product knowledge of this API: how partners obtain OAuth2 client credentials, request tokens, and use them against the gateway.]