OAuth2 might actually work