Infra 167 web oauth2

this comment seems confusing after your addition