A minimal OAuth2 server.