a simple server implements of oauth 2.0