change SSO to OAuth2, still has bug