[WIP] Lightweight OAuth2 provider with minimal dependencies, as a connect middleware