Use timezone aware datetimes with oauth2 provider, when supported.  Closes #947.