try oauth (copy from spring-security-oauth/samples/oauth/tonr); problems: http://localhost:8080/google/picasa -> 403 Forbidden, no ouath handshake happens