Demo of a OAuth2 protected api.  Requires Identity Server to be running