oauth2 lib upgrade and fix access forbidden http response code