Small REST service layer with OAuth Session management