Add OAUTH2 candidates to FIXME.md