oauth client controller implementation