WIP oauth2-upgrade: oauth2 upgrade and REST fixes

Perhaps we should rather use ``"/oauth/info/"`` -> ``url_for('oauth2server.info')``