an initial attempt at OAuth2 style bearer token authentication in Go