Use the OAuth2 strategy.