enabled oauth2 on root access