Spring-based REST backend that enforces authorization/authentication while accessing OAuth data