Improve OAuth2 request detection in WebUser