added example app, worked out some kinks in oauth2