OAuth2's not needed