OAuth2Api: checks and tests