test oauth2 concept