don't implicitly import provider.oauth2
Merge remote-tracking branch 'upstream/master'
it's safe to import scope and constants
Merge pull request #1455 from ericbuehl/master

don't implicitly import provider.oauth2