add simple oauth2 support