A reference design for enabling a PHP app to authenticate with an OAuth2 server