we wanted to make it as generic as possible,  so someone could auth against googles api, or some other api that is oauth2 compliant.  

whatever the simple way to say that is :)