fix oauth2waad requirements