Simple, opinionated OAuth 2.0 server