Add oauth2 mechanism in the core + basic badge API for testing