First pass at adding OAuth2 as an authorization mechanism, enabled via the `auth_type` configuration setting, defaults to "oauth"