Security system for experimenting with OAuth flows