some working implementation of oauth2 in roleservice