OAuth authorization with simple authorization server