enable oauth2 accessibilty for web client