Add OAuth2 backend

The backend is customized to support the following features:

- Email can be used as a user identifier in the OAuth2 username field.
- Trusted clients do not require the user consent and redirect automatically.
Does `@override_settings` not work here? I recall running across an issue with reloading `urls.py` when overriding settings.