whitelisting /oath2
Merge pull request #1565 from edx/e0d/no-auth-from-10

whitelisting /oath2