Playing with authentication and pre OAuth2