OAuth 2: get token done