2-legged OAuth2 support