specs for OAuth2 authenticator
added client_id/client_secret
added missing assertion
tests for authentication
tests for OAuth2 authenticator response
added test for unauthentication
tests for cookie store