included oauth2 in ApiControllerTest