encapsulate configured and authenticated state into OACSAuthClient