OAuth like authentication flow based on RSA private key