removed readObject and writeObject from OAuth2Request (which no longer needs them)