oauth2 references updated