whitelisting /oath2

@jarv @feanil 

The initlal strategy won't work because of our proxy configurtion.  This covers the oauth2 case.