Viewer__SpaClientId to the client id of an Auth0
Single Page Application, with this page's URL registered as an
allowed callback URL, logout URL and web origin. The machine-to-machine
application cannot be used here: client credentials authenticate a program
that already holds a secret, and cannot sign a person in.