oauth2 servlet filter moved to HTRC-Commons