Create the oauth/token endpoint and oauth library.
The library only checks if an app is valid (so far)