add Oauth2BearerToken helper