first cut of api
added example oauth2 server