An Oauth2 provider. Lightweight but tries to closely follow the spec.