Fixed OAuth2 authorization