Deprecate `token-client-registration` by always authenticating when it is used

[dlongley]

The UX for client registration has proved too onerous, it is to be removed. Until it is fully removed, any client attempting to authenticate using it should have it become a no-op (should automatically pass).