An OAuth 2.0 provider approach with Tornado 3.0. Some concepts are from pyoauth2.