change oauth endpoint to /oauth2