Working prototype achieved. TODO: enable Oauth2