+ using "Microsoft.Owin.Security.OAuth" for DataProtector to be compatible with Katana's OAuth-Server