oauth2/novosga api improvement