corrected oauth2 configuration