fix credentials for oauth2 server