Simple, secure OAuth 2.0 server