fixed: removed double encoding in OAuth2Provider