simple setup to test oauth2.0 flow