oauth2 validator class from settings, refs issue #19